← Back to browse · API

CVE-2023-25437

Severity
HIGH
CVSS
8.8
EPSS
0.14112
Risk score
40.14
CISA KEV
No
PoC
No
Published
2023-04-27
Modified
2025-01-31
First seen
2026-08-07
Aliases
EUVD-2023-29392, GHSA-F29G-732G-XJW9
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-29392

Description

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML.

References